Royal Road 解析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (175)

言語

en	144
it	8
fr	8
es	8
de	6

国・地域

us	90
it	10
ru	8
pl	8
ca	8

アクター

Royal Road	4
APT28	1
TrickBot	1
Zeus	1
Pikabot	1

関心

タイプ

Not Defined	58
Web Server	10
Content Management System	10
Operating System	10
Virtualization Software	8

ベンダー

Not Defined	70
Microsoft	18
Apache	6
Oracle	6
Drobo	4

製品

Microsoft Windows	10
WordPress	6
Drobo 5N2 NAS	4
Microsoft IIS	4
OpenSSH	4

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	EPSS	CTI	CVE
1	nginx 特権昇格	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	0.40	CVE-2020-12440
2	MidiCart PHP Shopping Cart item_show.php SQLインジェクション	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	0.05
3	WordPress Private Post 特権昇格	4.6	4.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00272	0.03	CVE-2020-11028
4	Apache HTTP Server mod_rewrite Redirect	6.7	6.7	$25k-$100k	$5k-$25k	Not Defined	Not Defined	0.00258	0.00	CVE-2020-1927
5	ProFTPD mod_copy 特権昇格	8.5	8.5	$0-$5k	$0-$5k	Not Defined	Official Fix	0.94462	0.00	CVE-2019-12815
6	Microsoft Exchange Server Privilege Escalation	8.5	7.6	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.03563	0.00	CVE-2021-26412
7	Gempar Script Toko Online shop_display_products.php SQLインジェクション	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00100	0.02	CVE-2009-0296
8	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash 情報の漏洩	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02016	0.02	CVE-2007-1192
9	Mihalism Multi Host users.php SQLインジェクション	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.00152	0.00	CVE-2008-0714
10	Microsoft IIS クロスサイトスクリプティング	5.2	4.7	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00548	0.06	CVE-2017-0055
11	Mailman 特権昇格	6.5	6.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00160	0.00	CVE-2018-13796
12	WordPress Thumbnail 特権昇格	7.5	7.5	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00990	0.03	CVE-2018-1000773
13	XenForo 特権昇格	8.6	7.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.02
14	DCP-Portal forums.php SQLインジェクション	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.00
15	Ideal BB.NET forums.aspx クロスサイトスクリプティング	3.5	3.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	0.00
16	logwatch logwatch.pl 特権昇格	9.8	9.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.05151	0.03	CVE-2011-1018
17	OpenSSH Authentication Username 情報の漏洩	5.3	4.8	$5k-$25k	$0-$5k	High	Official Fix	0.10737	0.54	CVE-2016-6210
18	Apache Shiro API ディレクトリトラバーサル	8.0	7.9	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00071	0.05	CVE-2023-34478
19	Subversion svn+ssh:/ URL 特権昇格	8.0	7.9	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.12851	0.03	CVE-2017-9800
20	Apache Subversion mod_authz_svn authenticated 情報の漏洩	5.3	4.6	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00380	0.03	CVE-2015-3184

キャンペーン (1)

These are the campaigns that can be associated with the actor:

Royal Road

IOC - Indicator of Compromise (4)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IPアドレス	Hostname	アクター	キャンペーン	Identified	タイプ	信頼度
1	138.68.133.211	share.sawblade.org.uk	Royal Road	Royal Road	2020年12月22日	verified	高
2	XXX.XXX.XX.XX		Xxxxx Xxxx	Xxxxx Xxxx	2020年12月22日	verified	高
3	XXX.XXX.XX.X		Xxxxx Xxxx	Xxxxx Xxxx	2020年12月22日	verified	高
4	XXX.XX.X.XXX	xxx.xx.x.xxx.xxxxx.xxx	Xxxxx Xxxx	Xxxxx Xxxx	2020年12月22日	verified	中

TTP - Tactics, Techniques, Procedures (15)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CWE-22	Path Traversal	predictive	高
2	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
3	T1059	CWE-94	Argument Injection	predictive	高
4	TXXXX.XXX	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	高
5	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
6	TXXXX.XXX	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	高
7	TXXXX	CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
8	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	高
9	TXXXX	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	高
10	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	高
11	TXXXX.XXX	CWE-XXX	Xxxxxxxx	predictive	高
12	TXXXX	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
13	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
14	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
15	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (92)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	/bin/sh	predictive	低
2	File	/oauth/authorize	predictive	高
3	File	/see_more_details.php	predictive	高
4	File	/uncpath/	predictive	中
5	File	/webmail/	predictive	中
6	File	/_next	predictive	低
7	File	admin/index.php	predictive	高
8	File	anonymous/authenticated	predictive	高
9	File	assets/add/registrar.php	predictive	高
10	File	booking.php	predictive	中
11	File	books.php	predictive	中
12	File	xxxx.xxx	predictive	中
13	File	xxxxxxxxx.xxxx	predictive	高
14	File	xxx-xxxx.xxx	predictive	中
15	File	xxx-xxx	predictive	低
16	File	xxx-xxx/xxxxxxxxxxxx.xxx	predictive	高
17	File	xxxxxx/xxx/x_xxxxxxxx_xxxxxxxx.x	predictive	高
18	File	xxxxxxxx_xxxxxxxxxxxx.xxx	predictive	高
19	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	高
20	File	xxxxx.xxx?xxx=xxxx&xxxxxx=xxxxxxxxx	predictive	高
21	File	xxxxxx.xxxx	predictive	中
22	File	xxxxxx.xxx	predictive	中
23	File	xxxx.x	predictive	低
24	File	xxxx.xxx	predictive	中
25	File	xxxxx.xxx	predictive	中
26	File	xxxx_xxxx.xxx	predictive	高
27	File	xxxxx.xxx	predictive	中
28	File	xxxxxxxx.xx	predictive	中
29	File	xxxxxxx/xxxxxxx/xxx_xxxxxxx.x	predictive	高
30	File	xxx/xxxxx.xxxx	predictive	高
31	File	xxxxxxx/xxxxxxxxxxxxxxxx/xxxxxxxxx/xxxxxxxx.xxxx	predictive	高
32	File	xxxxxxxxx.xxxx	predictive	高
33	File	xxxx.xxx	predictive	中
34	File	xxxxxxxx.xxx	predictive	中
35	File	xxxxxxxxx/xxxxxx.x	predictive	高
36	File	xxx.x	predictive	低
37	File	xxxxxxxx/xxxxx/xxxxxxx.xx	predictive	高
38	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	高
39	File	xxxxxxxx.xxx	predictive	中
40	File	xxxxxx/xxxxxxx/xxxxxxx/xxxxxx.xxx	predictive	高
41	File	xxxx-xxxxx_xxxxxxx.xxx	predictive	高
42	File	xxxxx.xxx	predictive	中
43	File	xxxx/xxxxxxxx/xxxxxxxx.xxxx	predictive	高
44	File	xxxxxx.xxx	predictive	中
45	File	xxxxxx/xx/xxxx.xxx	predictive	高
46	File	xxxxxxx/xxxxxx/xxxxx/xxxxxxx/xxx/xxx.xxx	predictive	高
47	File	xx-xxxxx/xxxxx-xxxx.xxx	predictive	高
48	File	xx-xxxxx/xxxxx.xxx?xxxx=xxxxxxxxxxx-xxxx&xx	predictive	高
49	File	xx-xxxxx/xxxxx.xxx?xxxx=xxx-xxxxx&xxxxxx=xxxx-xxxxx	predictive	高
50	File	xx-xxxxx/xxxxxxx-xxxxxxx.xxx	predictive	高
51	File	xx-xxxxxxxx/xxxxxxx-xxxxxxxx.xxx	predictive	高
52	Library	xxxxxxxx.xxx	predictive	中
53	Argument	--xxx	predictive	低
54	Argument	xxx_xxxx	predictive	中
55	Argument	xxxxx	predictive	低
56	Argument	xxxxxx	predictive	低
57	Argument	xxx	predictive	低
58	Argument	xxxxx	predictive	低
59	Argument	xxx_xx	predictive	低
60	Argument	xxx	predictive	低
61	Argument	xxxx_xx	predictive	低
62	Argument	xxxx/xxxx	predictive	中
63	Argument	xxxxxxx	predictive	低
64	Argument	xx	predictive	低
65	Argument	xxxx_xxxxxxx	predictive	中
66	Argument	xx	predictive	低
67	Argument	xxxx	predictive	低
68	Argument	xxxx	predictive	低
69	Argument	xx	predictive	低
70	Argument	xxxxxx	predictive	低
71	Argument	xxxx	predictive	低
72	Argument	xxxxx	predictive	低
73	Argument	xx	predictive	低
74	Argument	xxxxxxxx	predictive	中
75	Argument	xxxxxxxx	predictive	中
76	Argument	xxxx_xx	predictive	低
77	Argument	xxxxxxxx_xxxx/xxxxxx_xx/xxxxxxxx_xxx	predictive	高
78	Argument	xxxxxx/xxxxx	predictive	中
79	Argument	xxxxxx	predictive	低
80	Argument	xxxxxx	predictive	低
81	Argument	xxxxx	predictive	低
82	Argument	xxxxxxxxxx[xxxx]	predictive	高
83	Argument	xxxxxxxxxxx_xx	predictive	高
84	Argument	xxx	predictive	低
85	Argument	xxx	predictive	低
86	Argument	xxxxxxxx	predictive	中
87	Argument	xxxx->xxxxxxx	predictive	高
88	Input Value	.%xx.../.%xx.../	predictive	高
89	Input Value	xxx.xxx[xxxxx]	predictive	高
90	Input Value	…/.	predictive	低
91	Pattern	xxxxxxxx	predictive	中
92	Pattern	\|xx xx xx xx\|	predictive	高

参考 (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ 前概要次 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!